SIEM Security Analyst

Role: SIEM Security Analyst

Expected Duration: 12 months

Location: Austin, TX (Remote from anywhere within the US (Texas-based preferred)).

Summary:

The client has issued a request for a Security Analyst. This role will be managing security platform operations, responding to incidents, and performing continuous assessments to identify and mitigate risks.

Responsibilities include (but are not limited to):

• Monitoring and managing security platform operations to ensure the availability, integrity, and confidentiality of the agency s information systems.
• Collaborating with cross-functional teams to deploy, configure, and maintain security tools and technologies.
• Conducting regular vulnerability assessments, penetration tests, and security audits to identify and address potential risks and vulnerabilities.

Minimum Candidate Characteristics:

• 3+ years of experience in information and network security
• Scripting experience with Python, PowerShell, or Bash
• Regulatory frameworks such as NIST, ISO 27001, and GDPR

Exceptional Candidate Characteristics:

• Experience with Texas Child Support systems, programs, and projects
• Texas state agency experience
• CISSP, CISM, CEH, or Sec+ certifications

Key Responsibilities:

• Monitoring and managing security platform operations to ensure the availability, integrity, and confidentiality of the agency s information systems.
• Collaborating with cross-functional teams to deploy, configure, and maintain security tools and technologies.
• Conducting regular vulnerability assessments, penetration tests, and security audits to identify and address potential risks and vulnerabilities.
• Investigating and responding to security incidents, including analyzing security logs, conducting forensic investigations, and recommending appropriate remediation actions.
• Managing security-related incidents and escalations, adhering to defined incident response procedures and protocols.
• Developing and maintaining documentation, including standard operating procedures, security guidelines, and best practices for security platform operations.
• Assisting in the development and implementation of security policies, procedures, and controls to ensure compliance with regulatory requirements and industry standards.
• Providing support and guidance to other teams regarding security configurations, best practices, and incident response.
• Staying current with the latest trends, vulnerabilities, and threats in the field of information security, and making recommendations for continuous improvement of security operations.
• Collaborating with vendors and external stakeholders for troubleshooting and resolving security platform- related issues.

Required Skills:

• 3 years of Required Strong understanding of information security principles, concepts, and best practices.
• 3 years of Required Experience in operating and maintaining security tools and technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, vulnerability scanners, and endpoint protection platforms.
• 3 years of Required Familiarity with network protocols, network architecture, and network security.
• 3 years of Required Knowledge of common operating systems, such as Windows, Linux, and macOS.
• 3 years of Required Proficient in scripting and automation using languages such as Python, PowerShell, or Bash.
• 3 years of Required Familiarity with regulatory frameworks and standards, such as NIST, ISO 27001, and GDPR.
• 3 years of Required Experience with incident response procedures and practices.
• 3 years of Required Strong analytical and problem-solving skills with the ability to identify and mitigate security risks.
• 3 years of Required Excellent written and verbal communication skills, with the ability to convey technical concepts to non-technical stakeholders.

Preferred Skills:

• 4 years of Preferred Bachelor's degree in Computer Science, Information Security, or a related field.
• 3 years of Preferred Experience with the Texas Child Support system, programs, projects, and methodologies
• 1 year of Preferred Certifications such as CISSP, CISM, CEH, or Security+